Synthetic data only — no real PHI. Agents draft; humans approve. Dev auth is not for production.

Changes are audit-logged. The last tenant-wide platform_admin cannot be revoked; service accounts may only hold service_account.